SecurityScorecard Asset API

openapi: 3.2.0
info:
  title: ASI internal service Asset API
  description: Attack surface intelligence service
  version: 0.0.1
servers:
- url: https://api.securityscorecard.io
security:
- Token: []
tags:
- name: Asset
  description: asset behind the IP address
paths:
  /asi/details/asset/{asset}/port/{port}:
    get:
      tags:
      - Asset
      parameters:
      - in: path
        name: asset
        required: true
        schema:
          type: string
        description: ''
      - in: path
        name: port
        required: true
        schema:
          type: integer
        description: ''
      responses:
        '200':
          description: Port Details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getAsiAssetPortResponse'
      summary: Attack Surface Intelligence API Asset Port Details
      operationId: getAsiDetailsAssetByAssetPortByPort
      x-operation-id-source: derived
  /asi/details/asset/{ip}:
    get:
      tags:
      - Asset
      parameters:
      - in: path
        name: ip
        required: true
        example: 123.1.44.21
        schema:
          type: string
        description: ''
      responses:
        '200':
          description: IP Full Details
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/getAsiAssetIpResponse'
      summary: Attack Surface Intelligence API Asset IP Details
      operationId: getAsiDetailsAssetByIp
      x-operation-id-source: derived
components:
  schemas:
    getAsiAssetPortResponse:
      type: object
      properties:
        title:
          type: string
          description: UI Title
        port:
          type: number
          description: Port number
        service:
          type: string
          description: Service found on this port
        product:
          type: string
          description: Product detected on this port
        version:
          type: string
          description: Product version detected
        scripts:
          type: string
          description: Output of the scripts scanning this port
        firstSeen:
          type: string
          description: First time this port was detected
        lastSeen:
          type: string
          description: Last time the port seen opened
        device:
          type: string
          description: Device type detected
        os:
          type: string
          description: Operating system detected
        cpe:
          type: array
          description: CPEs strings associated with this port
          items:
            type: string
    getAsiAssetIpResponse:
      type: object
      additionalProperties: false
      properties:
        location:
          type: object
          properties:
            hostname:
              type: string
            country_name:
              type: string
              description: Country
            country_code:
              type: string
              description: Country Code
            city_name:
              type: string
              description: City
            cloud:
              type: string
              description: Cloud provider
            region:
              type: string
              description: Cloud region
            cidr:
              type: string
              description: CIDR
        attribution:
          type: object
          properties:
            companies:
              type: array
              description: List of companies attributed to this asset
              items:
                type: object
                properties:
                  company:
                    type: string
                    description: Company name
                  domain:
                    type: string
                    description: domain
                  scorecard:
                    type: string
                    description: Scorecard id
                  score:
                    type: number
                    description: SSC score
                  industry:
                    type: string
                    description: industry
                  libraries:
                    type: number
                    description: Libraries Count
        malrep:
          type: object
          properties:
            maliciousReputation:
              type: array
              items:
                type: object
                properties:
                  info:
                    type: string
                    description: Name of malicious reputation
                  last_seen:
                    type: string
                    description: Last time observed
        ports:
          type: object
          properties:
            ports:
              type: array
              description: list of open ports in the asset
              items:
                type: object
                properties:
                  last_seen:
                    type: string
                    description: scan time
                  port:
                    type: string
                    description: port number
                  product:
                    type: string
                    description: product running on the port
                  service:
                    type: string
                    description: service detected on port
                  device_type:
                    type: string
                    description: Device type
                  os_type:
                    type: string
                    description: Os type
                  cep:
                    type: array
                    description: CPEs
                    items:
                      type: string
        ransomware:
          type: object
          properties:
            ransomwareList:
              type: array
              description: Ransomware list
              items:
                type: object
                properties:
                  name:
                    type: string
                    description: Ransomware name
                  victim_name:
                    type: string
                    description: Victim name
                  victim_posted_domain:
                    type: string
                    description: Domain associated to victim
                  last_seen:
                    type: string
                    description: Time when ransomware was detected
        threat_actors:
          type: object
          properties:
            actors:
              type: array
              description: Threat actors associated to this asset
              items:
                type: object
                properties:
                  actor:
                    type: string
                    description: Threat Actor name
                  origin:
                    type: string
                    description: Origin
                  link_type:
                    type: string
                    description: link type (cve, malware... etc)
                  link:
                    type: string
                    description: Vulnerabilities associated to this threat actor
                  last_seen:
                    type: string
                    description: Last detection
        certs:
          type: object
          properties:
            certificates:
              type: array
              items:
                type: object
                properties:
                  hash:
                    type: string
                    description: Certificate Hash
                  status:
                    type: string
                    description: Certificate Status
                  domain:
                    type: string
                    description: Domain associated
        cves:
          type: object
          properties:
            cves:
              type: array
              description: List of CVEs
              items:
                type: object
                properties:
                  cvss:
                    type: number
                    description: CVSS score
                  cve:
                    type: string
                    description: CVE id
                  maturity:
                    type: string
                    description: Exploit Maturity
                  actor:
                    type: string
                    description: Threat actors using this CVE
                  port:
                    type: number
                    description: Port associated with the CVE
                  last_seen:
                    type: string
                    description: Last detection time
        infections:
          type: object
          properties:
            activeInfections:
              type: array
              items:
                type: object
                properties:
                  family:
                    type: string
                    description: Infection family
                  category:
                    type: string
                    description: Infection category
                  last_seen:
                    type: string
                    description: Last time observed
  securitySchemes:
    Token:
      type: apiKey
      in: header
      name: Authorization
      description: "SecurityScorecard API endpoints require an authentication token to be passed\nin an authorization header in order to return data. If you do not already\nhave a token, you can create one by going to the API Access area in your\n[Settings page](https://platform.securityscorecard.io/#/settings/api) and then\nclicking Generate New Token. Please note this tokens have no expiration\nso they can be used until manually revoked. If you have a token and generate\na new one, the previous token will be revoked and can no longer be used.\n\nAdministrators can also revoke API tokens for any user in their account.\n\nOnce you have your token you can pass it in using the `Authorization` http header like this:\n\n```\ncurl -X GET \\\n  https://api.securityscorecard.io/portfolios \\\n  -H 'authorization: Token <your token>'\n```\n"
x-provenance:
  method: searched
  source: https://securityscorecard.readme.io/reference
  harvested: '2026-10-14'
  tool: harvest-readme-openapi.py
  note: Assembled verbatim from the OpenAPI definition ReadMe embeds in each operation page of the provider's developer portal; paths and components merged by API title, nothing authored.
  assembled_from:
  - https://securityscorecard.readme.io/reference/get_asi-details-active-infections-family.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-asset-port-port.md
  - https://securityscorecard.readme.io/reference/get_asi-details-asset-ip.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-cve.md
  - https://securityscorecard.readme.io/reference/get_asi-details-cve-domain-domain.md
  - https://securityscorecard.readme.io/reference/get_asi-details-ransomware-ransomware.md
  - https://securityscorecard.readme.io/reference/get_asi-details-threat-actor-threatactor.md
  - https://securityscorecard.readme.io/reference/post_asi-facets.md
  - https://securityscorecard.readme.io/reference/post_asi-search.md
  merge:
    pages: 9
    deduped: 8
    conflicts_kept_first: 0